1427 matches found
CVE-2020-8277
CVE-2020-8277 For educational purposes only. Quick Run clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed...
Exploit for CVE-2026-105482
Report on Reproducing CVE-2026-105482 Vulnerability I. Bas...
CVE-2026-105482
A flaw was found in the Node.js DNS resolver APIs. Hostnames passed to dns.resolve that contain an embedded NUL character can be truncated when processed by c-ares. An attacker who can supply such a name may cause the application to resolve and act on an unintended hostname. Mitigation To mitigat...
CVE-2026-105482
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve functions and dns.reverse. This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup and the net/tls host options. Because the name is passed to c-ares as a C strin...
CLSA-2026-1792746902 nodejs: Fix of 3 CVEs
CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve and setLocalAddress APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity and restore IPv6 IP SAN...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : c-ares vulnerabilities (USN-8951-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8951-1 advisory. It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could...
USN-8951-1 c-ares vulnerabilities
It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2020-22217 It was discovered that c-ares incorrectl...
USN-8951-1: c-ares vulnerabilities
It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2020-22217 It was discovered that c-ares incorrectl...
[slackware-security] c-ares
New c-ares packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/c-ares-1.34.9-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Memory corruption when an application cancels its...
CLEANSTART-2026-AQ61858 c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was c...
Security vulnerability affects the nodejs-24 package. The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...
CLEANSTART-2026-EL60361 flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Do...
Security vulnerability affects the nodejs-24 package. A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking...
Slackware Linux 15.0 / current c-ares Vulnerability (SSA:2026-293-01)
The version of c-ares installed on the remote host is prior to 1.34.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-293-01 advisory. New c-ares packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
CLSA-2026-1792443100 c-ares: Fix of 2 CVEs
CVE-2022-4904: fix stack overflow in aressetsortlist due to missing input validation...
CVE-2026-69184 affecting package c-ares for versions less than 1.34.8-1
CVE-2026-69184 affecting package c-ares for versions less than 1.34.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-69186 affecting package c-ares for versions less than 1.34.8-1
CVE-2026-69186 affecting package c-ares for versions less than 1.34.8-1. An upgraded version of the package is available that resolves this issue...
ROOT-OS-ALPINE-320-CVE-2026-33630 CVE-2026-33630 in c-ares - Patched by Root
Root has patched CVE-2026-33630 in the c-ares package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-69184 CVE-2026-69184 in c-ares - Patched by Root
Root has patched CVE-2026-69184 in the c-ares package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2025-31498 CVE-2025-31498 in c-ares - Patched by Root
Root has patched CVE-2025-31498 in the c-ares package for Root:Alpine:3.20. Multiple fixed versions available...
